Skip to content

README.md

Latest commit

 

History

History
71 lines (60 loc) · 7.25 KB

README.md

File metadata and controls

71 lines (60 loc) · 7.25 KB
Raw

Requirements

Name Version
terraform >= 1.10
stackit >=0.93.0
time >=0.13.1
vault >=5.7.0

Providers

Name Version
stackit 0.93.0
time 0.13.1
vault 5.9.0

Modules

No modules.

Resources

Name Type
stackit_authorization_organization_role_assignment.sa_owner resource
stackit_authorization_project_role_assignment.this resource
stackit_objectstorage_bucket.default resource
stackit_objectstorage_bucket.tfstate resource
stackit_objectstorage_credential.this resource
stackit_objectstorage_credentials_group.this resource
stackit_observability_credential.this resource
stackit_observability_instance.this resource
stackit_resourcemanager_project.this resource
stackit_secretsmanager_instance.this resource
stackit_secretsmanager_user.default resource
stackit_service_account.automation resource
stackit_service_account_federated_identity_provider.this resource
stackit_service_account_key.automation resource
time_rotating.key_rotate resource
vault_kv_secret_v2.object_storage_credentials resource
vault_kv_secret_v2.observability resource
vault_kv_secret_v2.service_account_key_automation resource

Inputs

Name Description Type Default Required
federated_identity_providers List of federated identity providers to configure for the management service account. 
list(object({
    name   = string
    issuer = string
    assertions = list(object({
      item     = string
      operator = string
      value    = string
    }))
  }))
 [] no
labels Additional labels to apply to all folders. map(string) {} no
naming_pattern Naming prefix for all resources in this module, e.g. "myco-pltfm-hub-prod". string n/a yes
observability Observability instance configuration. Set to null to skip observability deployment. 
object({
    plan_name                              = optional(string, "Observability-Starter-EU01")
    acl                                    = optional(list(string), [])
    logs_retention_days                    = optional(number, 30)
    traces_retention_days                  = optional(number, 30)
    metrics_retention_days                 = optional(number, 90)
    metrics_retention_days_5m_downsampling = optional(number, 90)
    metrics_retention_days_1h_downsampling = optional(number, 90)
  })
 null no
organization_id Container ID of the root folder or organization under which the company folder will be created. string n/a yes
owner_email Email address of the owner for the folders. Required for STACKIT resource manager. string n/a yes
parent_container_id Parent container ID (folder or organization) where the project will be created. string n/a yes
project_name Name of the STACKIT project to create. string null no
role_assignments List of role assignments for the project. Subject can be a user email or service account email. 
list(object({
    role    = string
    subject = string
  }))
 [] no

Outputs

Name Description
bucket_name_tfstate The name of the tfstate object storage bucket.
project_container_id The container ID of the created STACKIT project.
project_id The project ID of the created STACKIT project.
project_name The name of the created STACKIT project.
secretsmanager_password The password of the default Secrets Manager user.
secretsmanager_username The username of the default Secrets Manager user.
service_account_email The email of the created service account.